Re: MS Exchange - Anti-virus

["Kieper, David" <kieperd () UWGB EDU>]

We use McAfee Groupshield 6.03 on our Exchange 2007 servers (and previously on Exchange 2003) servers for scanning 
email and have been very happy with performance, reliability, and accuracy.   We also load Virusscan 8.5i on the 
servers for file/memory A/V checking and are happy with that product as well.

Regards,

David Kieper
Manager, Network and Infrastructure Services
Information Technology Security Officer
Information Services Division
University of Wisconsin - Green Bay             office: (920) 465-2238
2420 Nicolet Drive                                      fax:    (920) 465-2864
Green Bay, WI  54311-7001   USA                 email:  kieperd () uwgb edu




-----Original Message-----
From: Cheek, Leigh [mailto:lcheek () UTK EDU]
Sent: Tuesday, December 11, 2007 3:56 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] MS Exchange - Anti-virus



I am auditing a cluster of MS Exchange 2003 servers. No anti-virus (AV) protection software is running on these servers 
and MS Office is not installed. Systems admins do not access e-mail or surf the Web from these servers.

I know that there is a performance hit when you install AV software and that AV, especially McAfee, can be difficult to 
tune and testing is a must. From what I have read on blogs and at Microsoft's site, I believe that installing AV is 
best practice for protecting these servers.

1. I have heard of problems with McAfee. If you have installed AV on your MS Exchange servers, what are your using?
2. Do you believe AV should or should not on MS Exchange 2003 servers?
Why?

I appreciate your help.

Thanks,
Leigh Cheek, CIA, CISA
Auditor
Audit and Consulting Services
University of Tennessee
149 Conference Center Building
Knoxville, TN 37996-4114
(865) 974-4420
fax (865) 974-6171
lcheek () utk edu